Privacy Policy

Piano GO Academy is an online piano learning platform operated by [LEGAL ENTITY NAME], registered at [BUSINESS ADDRESS] ("we", "us", "our"). We are the data controller for the personal data described in this policy.

Most of the people who use Piano GO Academy are adults — adult beginners and returning players learning for themselves, parents guiding a child, and piano teachers running a studio. A smaller number of accounts are created for students under 13 by a parent, guardian or teacher; those accounts are covered by additional safeguards described in our Children's Privacy Notice.

• Account information — email address, display name, password (stored only as a salted hash), the account type you select at signup (adult learner, parent, teacher, teenager) and optional profile photo.
• Learning and progress data — lessons opened, games played, scores, streaks, favourites, assigned work and completion status.
• Payment data — handled by our payment processor. We receive the plan purchased, subscription status, renewal date, the last four digits of the card and the billing country. We never see or store full card numbers.
• Technical and analytics data — IP address, browser and device type, pages viewed and approximate region. Analytics are only collected if you consent (see Cookie Policy).
• Communications — messages you send us through the contact form or by email, and your email marketing preferences.

We do not knowingly collect more data than we need, and we do not collect special category data (such as health or biometric data).

• To provide the service — creating your account, saving progress, unlocking content for your plan. Legal basis: performance of a contract.
• To take payment and manage subscriptions — including renewals, cancellations and refunds. Legal basis: performance of a contract and legal obligation.
• To keep the platform safe — preventing fraud, abuse and unauthorised sharing of licensed material. Legal basis: legitimate interests.
• To improve the platform — understanding which lessons and games work. Legal basis: consent (analytics cookies).
• To send service and marketing emails — account notices are sent on the basis of our contract with you; newsletters and free resource emails are sent only with your consent, and every email includes an unsubscribe link.

We share data only with service providers who process it on our instructions:

• Hosting, database and authentication infrastructure — stores your account and progress data.
• Payment processing (Stripe) — processes card payments and subscription billing.
• Analytics and advertising measurement (Google) — only active where you have consented.
• Email delivery — sends account, transactional and (where you consented) marketing email.

We do not sell your personal data, and we do not sell or share any data belonging to a child account for advertising purposes.

• Account and progress data: for as long as your account is active, and for up to 12 months after deletion in backups.
• Billing records: for the period required by tax and accounting law in [GOVERNING JURISDICTION] (typically 6–10 years).
• Support messages: up to 24 months.
• Analytics data: up to 14 months.

Subject to local law, you can ask us to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data — much of this you can do yourself in account settings.
• Delete your account and associated personal data.
• Export your data in a portable format.
• Object to or restrict certain processing, and withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

Email pianogoacademy@gmail.com and we will respond within 30 days. A parent, guardian or teacher may exercise these rights on behalf of a student account they created.

Piano GO Academy is available worldwide and our providers may process data in countries other than yours, including the United States. Where data leaves the UK/EEA we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

We use encryption in transit (HTTPS), hashed passwords, row-level access controls on our database and least-privilege access for staff. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authority where the law requires it.

Accounts for students under 13 must be created and managed by a parent, guardian or teacher, who provides consent during signup. Child accounts are never used for behavioural advertising. Full details, including how to review or delete a child's data, are in our Children's Privacy Notice.

We may update this policy as the platform evolves. We will change the "Last updated" date above and, for material changes, notify you by email or an in-app notice.

[LEGAL ENTITY NAME], [BUSINESS ADDRESS]. Email pianogoacademy@gmail.com.